Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/C0vG0uZJhdLke9zV4DtlDw7x7x4.roa
File: C0vG0uZJhdLke9zV4DtlDw7x7x4.roa (raw, json)
Hash identifier: HCSSZlXrpOKQe2BM9iayndjEAssKEROhKaQr2TLBt40=
Subject key identifier: 0B:4B:C6:D2:E6:49:85:D2:E4:7B:DC:D5:E0:3B:65:0F:0E:F1:EF:1E
Certificate issuer: /CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Certificate serial: 019DF379E30CE1B3BDA6EF0CD5D5F935667C
Authority key identifier: B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/C0vG0uZJhdLke9zV4DtlDw7x7x4.roa
Signing time: Mon 04 May 2026 14:52:24 +0000
ROA not before: Mon 04 May 2026 14:52:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199750
IP address blocks: 80.174.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.mft
rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f3:79:e3:0c:e1:b3:bd:a6:ef:0c:d5:d5:f9:35:66:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45999899f76d2e2e4ccdfc817f9879cfac06bbe
Validity
Not Before: May 4 14:52:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0b4bc6d2e64985d2e47bdcd5e03b650f0ef1ef1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b6:cf:d9:87:28:28:e3:25:67:82:e2:76:2a:
65:c8:89:6d:29:87:46:a6:a6:11:d0:e0:30:eb:d6:
05:72:e0:bd:16:5a:5b:89:bf:6f:d0:b3:eb:38:9f:
fe:34:46:5c:c7:f3:ba:38:c5:25:1a:c6:da:2d:6e:
8e:2d:9f:bb:0b:b0:14:da:35:4f:ab:4d:90:cc:ca:
e7:3a:90:80:0e:d9:01:a6:4b:a6:e9:76:3d:a1:b1:
37:bc:2a:a0:8a:19:70:24:fc:8a:d5:f8:38:e2:47:
ff:6c:cd:cd:97:07:9c:bc:0b:fb:e4:30:11:6d:ce:
db:af:77:00:6d:7e:2a:4f:56:75:21:42:87:dd:17:
7b:92:b5:60:29:76:44:63:5a:56:93:dc:d8:58:0e:
f9:d6:15:98:34:eb:a2:83:5a:87:88:d3:89:8f:a3:
ce:d9:45:91:ba:d0:fb:05:4c:a1:84:f1:5e:69:cc:
8d:24:dd:67:f1:02:fc:b1:d5:0c:9d:06:84:d1:68:
1f:c9:5e:71:ac:db:79:51:91:9b:37:05:d3:c5:36:
62:36:cb:95:cc:f4:ba:e9:04:b1:ab:d0:5e:6c:6d:
b7:b9:49:58:22:a2:64:5e:b7:92:61:b5:0c:d1:58:
04:a8:e1:30:10:0d:a6:7b:05:7e:46:ee:66:a4:4f:
1b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4B:C6:D2:E6:49:85:D2:E4:7B:DC:D5:E0:3B:65:0F:0E:F1:EF:1E
X509v3 Authority Key Identifier:
keyid:B4:59:99:89:9F:76:D2:E2:E4:CC:DF:C8:17:F9:87:9C:FA:C0:6B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFmZiZ920uLkzN_IF_mHnPrAa74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/C0vG0uZJhdLke9zV4DtlDw7x7x4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cb7b21-335c-42ca-859e-73428f9c7bff/1/tFmZiZ920uLkzN_IF_mHnPrAa74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.174.118.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:71:7e:f8:60:e7:e1:2f:5d:39:22:dd:52:0f:61:2b:d8:3b:
e2:a0:63:b6:3a:c7:97:90:32:99:92:c1:eb:98:de:90:81:fa:
68:21:66:65:fc:40:49:ba:7c:66:ad:06:97:3c:0b:eb:96:68:
42:41:dd:0d:90:ea:ae:61:dc:d8:7d:bf:25:0c:13:66:26:66:
cf:12:61:8c:51:69:53:2f:ee:c8:98:8b:f9:1b:50:27:5c:2e:
26:b5:9b:ed:32:f1:f5:dc:51:a8:02:c1:69:b5:84:78:4c:37:
03:9f:3a:22:15:0a:ee:ce:39:b7:32:63:8d:00:ed:06:86:0f:
f4:10:ef:e7:07:f8:f0:fd:86:fe:5e:97:07:8d:9d:2b:a8:0f:
c0:bb:09:f0:a1:35:96:20:08:42:dd:7d:50:c6:24:d5:69:1d:
a7:d0:59:ca:89:15:6f:3c:03:b4:81:b8:22:1f:3d:16:9e:13:
0d:38:8e:fd:c1:ca:97:64:e6:63:09:65:b9:d2:b6:a3:6b:85:
5d:d6:41:a3:2c:4b:90:52:b8:f8:f9:bd:4a:53:3c:d1:8d:db:
af:91:51:e8:d4:0a:45:bf:45:6d:22:bc:10:cd:4b:4a:1a:c1:
31:f4:5c:c0:f6:4e:25:0c:ad:74:d0:6a:6a:ce:f9:9b:3d:f8:
7f:59:ff:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:09:06 2026 by rpki-client